Bayesian Networks and the Value of the Evidence for the Forensic Two-Trace Transfer Problem

Forensic scientists face increasingly complex inference problems for evaluating likelihood ratios (LRs) for an appropriate pair of propositions. Up to now, scientists and statisticians have derived LR formulae using an algebraic approach. However, this approach reaches its limits when addressing cases with an increasing number of variables and dependence relationships between these variables. In this study, we suggest using a graphical approach, based on the construction of Bayesian networks (BNs). We first construct a BN that captures the problem, and then deduce the expression for calculating the LR from this model to compare it with existing LR formulae. We illustrate this idea by applying it to the evaluation of an activity level LR in the context of the two-trace transfer problem. Our approach allows us to relax assumptions made in previous LR developments, produce a new LR formula for the two-trace transfer problem and generalize this scenario to n traces.

Situating forensic traces in time

Situating events and traces in time is an essential problem in investigations. To date, among the typical ques- 21¦tions issued in forensic science, time has generally been unexplored. The reason for this can be traced to the 22¦complexity of the overall problem, addressed by several scientists in very limited projects usually stimulated 23¦by a specific case. Considering that such issues are recurrent and transcending the treatment of each trace 24¦separately, the formalisation of a framework to address dating issues in criminal investigation is undeniably 25¦needed. Through an iterative process consisting of extracting recurrent aspects discovered from the study of 26¦problems encountered by practitioners and reported in the literature, common mechanisms were extracted 27¦and provide understanding of underlying factors encountered in forensic practise. Three complementary ap- 28¦proaches are thus highlighted and described to formalise a preliminary framework that can be applied for the 29¦dating of traces, objects, persons and indirectly events.

Toward a novel forensic intelligence model: systematic profiling of false identity documents

False identity documents represent a serious threat through their production and use in organized crime and by terrorist organizations. The present-day fight against this criminal problem and threats to national security does not appropriately address the organized nature of this criminal activity, treating each fraudulent document on its own during investigation and the judicial process, which causes linkage blindness and restrains the analysis capacity. Given the drawbacks of this case-by-case approach, this article proposes an original model in which false identity documents are used to inform a systematic forensic intelligence process. The process aims to detect links, patterns, and tendencies among false identity documents in order to support strategic and tactical decision making, thus sustaining a proactive intelligence-led approach to fighting identity document fraud and the associated organized criminality. This article formalizes both the model and the process, using practical applications to illustrate its powerful capabilities. This model has a general application and can be transposed to other fields of forensic science facing similar difficulties.

Forensic processing of false identity and travel documents to produce intelligence: a novel approach to assist in fighting organized crime

The production and use of false identity and travel documents in organized crime represent a serious and evolving threat. However, a case-by-case perspective, thus suffering from linkage blindness and a limited analysis capacity, essentially drives the present-day fight against this criminal problem. To assist in overcoming these limitations, a process model was developed using a forensic perspective. It guides the systematic analysis and management of seized false documents to generate forensic intelligence that supports strategic and tactical decision-making in an intelligence-led policing approach. The model is articulated on a three-level architecture that aims to assist in detecting and following-up on general trends, production methods and links between cases or series. Using analyses of a large dataset of counterfeit and forged identity and travel documents, it is possible to illustrate the model, its three levels and their contribution. Examples will point out how the proposed approach assists in detecting emerging trends, in evaluating the black market's degree of structure, in uncovering criminal networks, in monitoring the quality of false documents, and in identifying their weaknesses to orient the conception of more secured travel and identity documents. The process model proposed is thought to have a general application in forensic science and can readily be transposed to other fields of study.

Forensic intelligence framework-Part I: induction of a transversal model by comparing illicit drugs and false identity documents monitoring

Forensic intelligence is a distinct dimension of forensic science. Forensic intelligence processes have mostly been developed to address either a specific type of trace or a specific problem. Even though these empirical developments have led to successes, they are trace-specific in nature and contribute to the generation of silos which hamper the establishment of a more general and transversal model. Forensic intelligence has shown some important perspectives but more general developments are required to address persistent challenges. This will ensure the progress of the discipline as well as its widespread implementation in the future. This paper demonstrates that the description of forensic intelligence processes, their architectures, and the methods for building them can, at a certain level, be abstracted from the type of traces considered. A comparative analysis is made between two forensic intelligence approaches developed independently in Australia and in Europe regarding the monitoring of apparently very different kind of problems: illicit drugs and false identity documents. An inductive effort is pursued to identify similarities and to outline a general model. Besides breaking barriers between apparently separate fields of study in forensic science and intelligence, this transversal model would assist in defining forensic intelligence, its role and place in policing, and in identifying its contributions and limitations. The model will facilitate the paradigm shift from the current case-by-case reactive attitude towards a proactive approach by serving as a guideline for the use of forensic case data in an intelligence-led perspective. A follow-up article will specifically address issues related to comparison processes, decision points and organisational issues regarding forensic intelligence (part II).

Education and Training in Forensic Intelligence: a New Challenge

From recent calls for positioning forensic scientists within the criminal justice system, but also policing and intelligence missions, this paper emphasizes the need for the development of educational and training programs in the area of forensic intelligence, It is argued that an imbalance exists between perceived and actual understanding of forensic intelligence by police and forensic science managers, and that this imbalance can only be overcome through education. The challenge for forensic intelligence education and training is therefore to devise programs that increase forensic intelligence awareness, firstly for managers to help prevent poor decisions on how to develop information processing. Two recent European courses are presented as examples of education offerings, along with lessons learned and suggested paths forward. It is concluded that the new focus on forensic intelligence could restore a pro-active approach to forensic science, better quantify its efficiency and let it get more involved in investigative and managerial decisions. A new educational challenge is opened to forensic science university programs around the world: to refocus criminal trace analysis on a more holistic security problem solving approach.

Explorer les intersections entre la science forensique et la criminologie au travers de la temporalité de trois types d'actions de contrôle social

Our contribution aims to explore some intersections between forensic science and criminology through the notion of time. The two disciplines analyse the vestiges of illicit activities in order to reconstruct and understand the past, and occasionally to prevent future harms. While forensic science study the material and digital traces as signs of criminal activities and repetitions, criminology contributes to the acquisition of knowledge through its analysis of crime, its authors and victims, as well as social (re)actions to harmful behaviours. Exploratory, our contribution proposes a conceptual delimitation of the notion of time considering its importance in the study of criminality and harms. Through examples, we propose a "crimino-forensic" analysis of three types of actions of social control - prevention, investigation and intelligence - through their respective temporality (before, near or during and after the criminal activity or harm). The temporal issues of the different methodologies developed to appreciate the efficiency of these actions are also addressed to highlight the connections between forensic science and criminology. This attempt to classify the relations between different times and actions of social control are discussed through the multiple benefits and challenges carried out by the formalisation of fusing those two sciences. Notre contribution vise à explorer quelques intersections entre la science forensique (ou criminalistique) et la criminologie au travers de la notion de temps. En effet, les deux disciplines ont en commun qu'elles analysent les vestiges du phénomène criminel pour tenter de reconstruire et comprendre le passé et parfois prévenir de futurs incidents. Alors que la science forensique étudie les traces matérielles et numériques comme signe d'activités et de répétitions criminelles, la criminologie contribue à l'avancée des connaissances en ce domaine par son analyse des comportements contraires aux normes, de leurs auteurs et de leurs victimes, ainsi que des (ré)actions sociales à ces comportements. A but exploratoire, notre contribution propose une délimitation conceptuelle de la notion de temps en regard de l'importance que revêtent ses différentes manifestations dans l'étude de la criminalité. A l'appui d'exemples, nous proposons une analyse « crimino-forensique » de trois types d'action de contrôle social - la prévention, l'investigation et le renseignement - en fonction de leur temporalité respective (avant, proche voire pendant et après l'activité criminelle). Les enjeux temporels entourant les différentes stratégies méthodologiques développées pour apprécier l'efficacité de ces actions sont aussi abordés pour mettre en évidence des pistes d'intégration entre la science forensique et la criminologie. Cet essai de classification des relations entre les temps et ces trois actions de contrôle social est discuté sous l'angle des bénéfices, multiples, mais aussi des défis, que pose la formalisation des liens entre ces deux disciplines des sciences criminelles.

The polymorhism of crime scene investigation: an exploratory analysis of the influence of crime and forensic intelligence on decisions made by crime scene examiners

A growing body of scientific literature recurrently indicates that crime and forensic intelligence influence how crime scene investigators make decisions in their practices. This study scrutinises further this intelligence-led crime scene examination view. It analyses results obtained from two questionnaires. Data have been collected from nine chiefs of Intelligence Units (IUs) and 73 Crime Scene Examiners (CSEs) working in forensic science units (FSUs) in the French speaking part of Switzerland (six cantonal police agencies). Four salient elements emerged: (1) the actual existence of communication channels between IUs and FSUs across the police agencies under consideration; (2) most CSEs take into account crime intelligence disseminated; (3) a differentiated, but significant use by CSEs in their daily practice of this kind of intelligence; (4) a probable deep influence of this kind of intelligence on the most concerned CSEs, specially in the selection of the type of material/trace to detect, collect, analyse and exploit. These results contribute to decipher the subtle dialectic articulating crime intelligence and crime scene investigation, and to express further the polymorph role of CSEs, beyond their most recognised input to the justice system. Indeed, they appear to be central, but implicit, stakeholders in intelligence-led style of policing.

Forensic aspects of the weathering and ageing of spray paints

This paper presents a preliminary study on the degradation of spray paint samples, illustrated by Optical, FTIR and Raman measurements. As opposed to automotive paints which are specifically designed for improved outdoor exposure and protected using hindered amine light absorbers (HALS) and ultra-violet absorbers (UVA), the spray paints on their side are much simpler in composition and very likely to suffer more from joint effects of solar radiation, temperature and humidity. Six different spray paint were exposed to outdoor UV-radiation for a total period of three months and both FTIR and Raman measurements were taken systematically during this time. These results were later compared to an artificial degradation using a climate chamber. For infrared spectroscopy, degradation curves were plotted using the photo-oxidation index (POI), and could be successfully approximated with a logarithmic fitting (R2 > 0.8). The degradation can appear after the first few days of exposure and be important until 2 months, where it stabilizes and follow a more linear trend afterwards. One advantage is that the degradation products appeared almost exclusively at the far end (∼3000 cm−1) of mid-infrared spectra, and that the fingerprint region of the spectra remained stable over the studied period of time. Raman results suggest that the pigments on the other side, are much more stable and have not shown any sign of degradation over the time of this study. Considering the forensic implications of this environmental degradation, care should be taken when comparing samples if weathering is an option (e.g. an exposed graffiti compared to the paint from a fresh spray paint can). Degradation issues should be kept in mind as they may induce significant differences between paint samples of common origin.

(210)Po poisoning as possible cause of death: forensic investigations and toxicological analysis of the remains of Yasser Arafat.

The late president of the Palestinian Authority, Yasser Arafat, died in November 2004 in Percy Hospital, one month after having experienced a sudden onset of symptoms that included severe nausea, vomiting, diarrhoea and abdominal pain and which were followed by multiple organ failure. In spite of numerous investigations performed in France, the pathophysiological mechanisms at the origin of the symptoms could not be identified. In 2011, we found abnormal levels of polonium-210 ((210)Po) in some of Arafat's belongings that were worn during his final hospital stay and which were stained with biological fluids. This finding led to the exhumation of Arafat's remains in 2012. Significantly higher (up to 20 times) activities of (210)Po and lead-210 ((210)Pb) were found in the ribs, iliac crest and sternum specimens compared to reference samples from the literature (p-value <1%). In all specimens from the tomb, (210)Po activity was supported by a similar activity of (210)Pb. Biokinetic calculations demonstrated that a (210)Pb impurity, as identified in a commercial source of 3MBq of (210)Po, may be responsible for the activities measured in Arafat's belongings and remains 8 years after his death. The absence of myelosuppression and hair loss in Mr Arafat's case compared to Mr Litvinenko's, the only known case of malicious poisoning with (210)Po, could be explained by differences in the time delivery-scheme of intake. In conclusion, statistical Bayesian analysis combining all the evidence gathered in our forensic expert report moderately supports the proposition that Mr Arafat was poisoned by (210)Po.

Evaluating forensic biology results given source level propositions

The evaluation of forensic evidence can occur at any level within the hierarchy of propositions depending on the question being asked and the amount and type of information that is taken into account within the evaluation. Commonly DNA evidence is reported given propositions that deal with the sub-source level in the hierarchy, which deals only with the possibility that a nominated individual is a source of DNA in a trace (or contributor to the DNA in the case of a mixed DNA trace). We explore the use of information obtained from examinations, presumptive and discriminating tests for body fluids, DNA concentrations and some case circumstances within a Bayesian network in order to provide assistance to the Courts that have to consider propositions at source level. We use a scenario in which the presence of blood is of interest as an exemplar and consider how DNA profiling results and the potential for laboratory error can be taken into account. We finish with examples of how the results of these reports could be presented in court using either numerical values or verbal descriptions of the results.

Digital evidence, 'absence' of data and ambiguous patterns of reasoning

In this paper we discuss the use of digital data by the Swiss Federal Criminal Court in a recent case of attempted homicide. We use this case to examine drawbacks for the defense when the presentation of scientific evidence is partial, especially when the only perspective mentioned is that of the prosecution. We tackle this discussion at two distinct levels. First, we pursue an essentially non-technical presentation of the topic by drawing parallels between the court's summing up of the case and flawed patterns of reasoning commonly seen in other forensic disciplines, such as DNA and particle traces (e.g., gunshot residues). Then, we propose a formal analysis of the case, using elements of probability and graphical probability models, to justify our main claim that the partial presentation of digital evidence poses a risk to the administration of justice in that it keeps vital information from the defense. We will argue that such practice constitutes a violation of general principles of forensic interpretation as established by forensic science literature and current recommendations by forensic science interest groups (e.g., the European Network of Forensic Science Institutes). Finally, we posit that argument construction and analysis using formal methods can help replace digital evidence appropriately into context and thus support a sound evaluation of the evidence.

Image processing of false identity documents for forensic intelligence

Forensic intelligence has recently gathered increasing attention as a potential expansion of forensic science that may contribute in a wider policing and security context. Whilst the new avenue is certainly promising, relatively few attempts to incorporate models, methods and techniques into practical projects are reported. This work reports a practical application of a generalised and transversal framework for developing forensic intelligence processes referred to here as the Transversal model adapted from previous work. Visual features present in the images of four datasets of false identity documents were systematically profiled and compared using image processing for the detection of a series of modus operandi (M.O.) actions. The nature of these series and their relation to the notion of common source was evaluated with respect to alternative known information and inferences drawn regarding respective crime systems. 439 documents seized by police and border guard authorities across 10 jurisdictions in Switzerland with known and unknown source level links formed the datasets for this study. Training sets were developed based on both known source level data, and visually supported relationships. Performance was evaluated through the use of intra-variability and inter-variability scores drawn from over 48,000 comparisons. The optimised method exhibited significant sensitivity combined with strong specificity and demonstrates its ability to support forensic intelligence efforts.

Implications for DNA identification arising from an analysis of Australian forensic databases

Previous analyses of Australian samples have suggested that populations of the same broad racial group (Caucasian, Asian, Aboriginal) tend to be genetically similar across states. This suggests that a single national Australian database for each such group may be feasible, which would greatly facilitate casework. We have investigated samples drawn from each of these groups in different Australian states, and have quantified the genetic homogeneity across states within each racial group in terms of the "coancestry coefficient" F(ST). In accord with earlier results, we find that F(ST) values, as estimated from these data, are very small for Caucasians and Asians, usually <0.5%. We find that "declared" Aborigines (which includes many with partly Aboriginal genetic heritage) are also genetically similar across states, although they display some differentiation from a "pure" Aboriginal population (almost entirely of Aboriginal genetic heritage).

First contribution of mites (Acari) to the forensic analysis of hanged corpses: a case study from Spain

This case study from North Spain, highlights the importance of the collection of mites in addition to insects, from crime scenes or corpses subjected to environmental constraints that reduce or minimise insect activity, such as hanged corpses. In addition, this analysis highlights the relevance of arthropods’ collection in the field, even after the corpse has been moved away for autopsy. Four species of mites, phoretic on carrion (Silphidae) and rove (Staphylinidae) beetles, complemented and reinforced the autopsy analysis as well as the scarce information provided by insect activity. Poecilochirus carabi Canestrini & Canestrini, 1882 and Poecilochirus (Physoparasitus) davydovae Hyatt, 1980 (Mesostigmata: Parasitidae) were found in association with two Silphidae, Nicrophorus Fabricius, 1775 and Necrodes Leach, 1815, only when sampled in the autopsy room; this is suggestive of host-switching of mites and was likely due to the lack of availability of specific carriers in the field. The interpretation of the activity of Parasitidae mites both in the field and the autopsy room allows a better understanding of the timing and circumstances of decomposition. Phoretic deutonymphs of Pelzneria Scheucher 1957 (Astigmata: Histiostomatidae) were highly abundant, mostly P. crenulata Oudemans, 1909 and are reported for the first time on a Staphylinidae rove beetle, Creophilus maxillosus (L., 1758). Surprisingly, in this case study no Pelzneria were associated with the Silphidae found, which are their most common hosts, such as Necrodes littoralis (L., 1758) and Nicrophorus interruptus (Stephens, 1830). All histiostomatids were removed from the staphylinid (rove beetle) collected from the soil, at the scene of death, suggesting a recent arrival of the beetle. The occurrence of Staphylinidae beetles and their associated mites, such as Parasitidae and Pelzneria, and the information they provided would have been easily overlooked or lost if only the autopsy sampling would have been considered in the analysis of the case. The four mite species are reported for the first time for the Iberian Peninsula.